Claire's Data Breach Lawsuit: A Hacker Claim, Not a Settlement
Reference Guide
If you searched “claire's lawsuit” in October 2026, this is why: on October 12, 2026 a ransomware group called Dark Project claimed it took 1.71 terabytes of data from Claire's. Claire's has not confirmed a breach. Lawyers are recruiting, and two new federal complaints against Claire's Essentials, LLC appeared in Chicago days later. There is no settlement, no claim form and no deadline. The only Claire's data breach settlement — from 2020 — closed in 2022.
Questions about this case?
AI Legal Assistant · free · answers in seconds · general information, not legal advice
Independent information service: Settlement Insight is not the settlement administrator, is not affiliated with or endorsed by the company named above, and is not a law firm. Submitting this form does not file a claim — it shares your information with our participating legal intake partners, who may contact you about your options.
What Is Being Claimed
According to a post recorded by the dark-web monitoring site Ransomware.live on October 12, 2026, the group Dark Project claimed an attack on Claire's the same day. The breach tracker Breachsense lists the claim against claires.com with a leak size of 1.71TB, discovered October 13, 2026.
That is an attacker's claim, not a confirmed fact. As of October 19, 2026, no description of what data was taken has been published — investigation pages list the impacted data as “TBD” — and no official statement from Claire's has been reported. Ransomware groups post claims like this to pressure a company into paying; some turn out to be real, some exaggerated.
Case details
October 2026 incident: as of October 19, 2026, no complaint has been publicly tied to it. The federal court in Chicago (U.S. District Court for the Northern District of Illinois) docketed two new complaints against Claire's Essentials, LLC, the entity that runs Claire's after its 2025 sale: Jacobs v. Claire's Essentials, LLC, No. 1:26-cv-12666, on October 15, 2026, and Paul v. Claire's Essentials, LLC, No. 1:26-cv-12692, on October 16, 2026. The timing fits, but what those complaints allege could not be confirmed from the public docket entries, so we do not call them breach cases.
2020 breach (closed): Rossi v. Claire's Stores, Inc., No. 1:20-cv-05090, and Parker v. Claire's Stores, Inc., No. 1:20-cv-05574, both in the Northern District of Illinois. Rossi ended in a settlement with a claim deadline of September 24, 2022.
Status: Unconfirmed Breach, No Settlement
Two separate things are easy to confuse with this. The 2025 Chapter 11 case has a claims agent, but that process is for the company's creditors. And the $350,000 settlement you may see online covers the 2020 website breach; its claim deadline passed on September 24, 2022.
Who Could Be Affected
Nobody knows yet, because Claire's has not said what, if anything, was taken. Investigators are asking both current and former employees and customers to come forward, since a 1.71TB haul from a retailer could hold either kind of record.
The practical test is a notice letter or email from Claire's itself. If a breach is confirmed and personal information was involved, state laws require the company to notify the people affected, and the notice says which data fields were exposed. Keep it. Until then, an unsolicited message saying you “were affected” did not come from any court.
Is There Money? Not From This Incident
The closest precedent is Claire's own. The 2020 checkout-skimming breach was settled with a fund of up to $350,000 for consumer claims — reimbursement of documented expenses, a separate track for extraordinary losses, and one free year of Experian IdentityWorks — with attorneys' fees and administration paid on top. Claire's admitted no wrongdoing. That fund was small because the class was online shoppers over a few weeks; it is context, not a forecast. To estimate how breach settlements divide, see our data breach settlement calculator.
Claire's Data Breach Timeline
April 7 – June 2020 — Checkout Skimming
The 2020 lawsuits allege malware on Claire's e-commerce platform skimmed card details from online orders. Customers were notified July 7, 2020.
August – September 2020 — Two Federal Suits
Rossi (1:20-cv-05090, removed from Illinois state court) and Parker (1:20-cv-05574, filed September 18, 2020) proceed in the Northern District of Illinois.
2022 — $350,000 Settlement, Now Closed
Claire's settles without admitting wrongdoing. The claim deadline was September 24, 2022; the final approval hearing was set for September 27, 2022.
August 6 – September 2025 — Bankruptcy and Sale
Claire's files Chapter 11 in Delaware for the second time since 2018. The sale to an Ames Watson affiliate is approved September 9, 2025 and completed later that month.
October 12, 2026 — Dark Project Claims 1.71TB
A ransomware group claims an attack on Claire's. Claire's has not confirmed it; law firms open investigations October 13, 2026.
October 15–16, 2026 — Two New Complaints, Subject Unconfirmed
Jacobs (1:26-cv-12666) and Paul (1:26-cv-12692) are docketed against Claire's Essentials, LLC in Chicago. As of October 19, 2026 there is no settlement and no claim form.
Three Things to Watch For
An unconfirmed breach at a brand with a young customer base is an easy hook:
“Claim your Claire's breach payment” pages
There is no settlement and no administrator for the October 2026 claim. A page asking for your card number or Social Security number to “register” for a payout is collecting data, not filing anything.
“Verify your card” messages after the news
Criminals time phishing to headlines. A text or email saying your Claire's order or rewards account was compromised and asking you to re-enter card details or a password should be ignored — go to your bank or the retailer's site directly.
Recycled 2020 settlement offers
The $350,000 settlement for the 2020 website breach closed for claims on September 24, 2022. Anyone offering to recover “unclaimed” money from it for a fee is selling nothing.
Claire's Lawsuit — Questions People Actually Ask
Short answers to the questions people ask most about this case.
Is there a Claire's data breach lawsuit right now?
As of October 19, 2026, no lawsuit has been publicly confirmed as filed over the October 2026 incident. Law firms are investigating, and two new complaints against Claire's Essentials, LLC (Nos. 1:26-cv-12666 and 1:26-cv-12692, N.D. Ill.) were docketed October 15 and 16, 2026, but their subject could not be confirmed.
Did Claire's confirm a data breach?
No public confirmation has been reported as of October 19, 2026. The only source is the Dark Project group's own claim of 1.71TB, recorded on October 12, 2026. What data, whose data, and whether the claim is accurate are all unknown.
Is there a Claire's settlement or claim form?
Not for the 2026 incident: no settlement, no fund, no claim form, no deadline. If that changes, class members are notified directly by a court-appointed administrator — you do not need to sign up anywhere to be included.
What was the 2020 Claire's data breach settlement?
Claire's settled the Rossi case (No. 1:20-cv-05090, N.D. Ill.) over malware that skimmed online checkout data in spring 2020, with a fund of up to $350,000 for documented expenses plus a year of credit monitoring. The claim deadline was September 24, 2022. It is closed.
How much money will I get from a class action lawsuit?
From this incident, nothing yet — there is no case to pay. In data breach settlements generally, documented losses are reimbursed up to a cap and undocumented claims receive a smaller flat amount; Claire's 2020 fund was up to $350,000 in total. Our payout calculator shows how funds divide.
Why is Claire's going out of business?
It is not, as of October 19, 2026. Claire's filed Chapter 11 on August 6, 2025, citing debt and the shift away from mall stores. An Ames Watson affiliate bought the North American business for $104 million in cash plus a $36 million seller note, keeping at least 795 stores; the sale was completed in September 2025. Other stores closed.
What is the Claire's ear piercing lawsuit?
It is a separate matter from the data breach — individual injury cases, not a class action. In one, an appeals court ruled that the parents of a 13-year-old whose ear lobe was disfigured by an infection did not owe Claire's Boutiques $200,274 in trial costs. In Ireland, a judge approved a €30,330 settlement in December 2025 for a child scarred by a piercing. If you were injured, this page does not help; a personal injury attorney is the right contact.
What should I do right now?
Watch your card statements if you shopped with Claire's, change any reused password from a Claire's account, and consider a free credit freeze at the three bureaus if you are a current or former employee whose Social Security number the company held. Keep any notice letter you receive.
About This Information
Editorially Reviewed — Content reviewed for accuracy using published legal research, government data, and verified court records. See our methodology. Reviewed by Leonard Goldberg, Editor · Last updated - $236 billion in real payouts analyzed · See what we found
This page is for general information only and is not legal advice. Lawsuit status, eligibility, and compensation can change. Settlement Insight is not a law firm and does not represent any party. Consult a licensed attorney about your specific situation.
Related Consumer Brand Lawsuits
Other cases and free tools — not about this case.
Similar cases we track
- Open Class Action SettlementsSettlements you can still file a claim in, with deadlines
- Data Breach Settlement CalculatorEstimate what a breach settlement could pay per person
- Settlement Payout CalculatorSee how a settlement fund divides among claimants
- Class Action LawsuitsHow class actions work and what members can expect